-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability documentation explicitly states the URL validation regex is the root cause, and the PoC demonstrates exploitation via the is.url() method. The advisory links confirm this is the primary affected functionality with no patched version available. The function name and attack vector are directly specified in both GHSA and CVE descriptions.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| is_js | npm | <= 0.9.0 |
JavaScriptJavaScriptOngoing coverage of React2Shell